Microsoft Exchange Server Installed on a Member Server

Posted on 2009-04-10
Last Modified: 2012-05-06
I'm installing Microsoft Exchange 2000 on a Microsoft 2000 Server and the server will be located in the DMZ of our filewall.  My question is can the Microsoft 2000 Server be a member server or does this server have to be an active directory domain controller?
Question by:jnelipowitz
  • 3
  • 2
LVL 10

Expert Comment

ID: 24117084
As long as it can contact a Domain Controller, it is fine where you keep it.
LVL 65

Expert Comment

ID: 24117237
Although whatever your reasons for wanting to put the machine in the DMZ, I can guarantee that they are wrong. There are no good reasons for putting an Exchange server in the DMZ, certainly not a Windows 2000/Exchange 2000 system which cannot defend itself from even the most basic of attacks (directory harvest).

Why are you putting this server in the DMZ? What is its purpose in there?
If it is for anything "security" related then you have been misguided.


Author Comment

ID: 24117331
My understanding is that our existing Exchange 5.5 Server was place in the DMZ of our Cisco 515e PIX firewall for security.  The DMZ is a separate subnet that can not be contacted by the Domain Controller.
Too many email signature changes to deal with?

Are you constantly being asked to update your organization's email signatures? Do they take up too much of your time? Wouldn't you love to be able to manage all signatures from one central location, easily design them and deploy them quickly to users. Well, you can!

LVL 65

Expert Comment

ID: 24117366
The security reason is completely false. Putting an Exchange server does not improve your security in any shape or form. It actually reduces your security. Due to the way that Exchange works, it needs to constantly communicate with a domain controller, that domain controller needs to be the same one as the main backend server. If your DMZ cannot see the production network then you cannot run Exchange in the DMZ.

What does the server actually do/will do? SMTP, OWA, something else?


Author Comment

ID: 24117578
It will be a standard Exchange 2000 server with the SMTP connector.  
LVL 65

Accepted Solution

Mestha earned 500 total points
ID: 24117762
What is going to do though? Is it just to pass email through?
If so then you would be better off with a regular Windows 2003 server and a copy of Vamsoft ORF. You can then open two ports only between the DMZ and the production network (25 for SMTP email and the LDAP port).
Cheaper than an Exchange license and doesn't require the machine to be a member of the domain.


Featured Post

Can’t get the mobile email signature right?

Not having any luck when trying to create an email signature for mobile devices? Does the formatting keep messing up? Make sure you have great email signatures on all devices by using Exclaimer Cloud - Signatures for Office 365.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now